Malicious code in @eventcatalog/generator-asyncapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9598dd9b72db501adb05bcad416fa140dc327848558cdcca03a10d2b127113b The package @eventcatalog/generator-asyncapi was found to contain malicious code. Source: ghsa-malware...

Malicious code in generator-meteor-stock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 678199611d26a80c99b9cad377ac570dda69e8bc8ed1114a1178d98c2c611973 The package generator-meteor-stock was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199206

Malicious code in generator-meteor-stock npm...

MAL-2025-191101 Malicious code in generator-meteor-stock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 678199611d26a80c99b9cad377ac570dda69e8bc8ed1114a1178d98c2c611973 The package generator-meteor-stock was found to contain malicious code. Source: ghsa-malware...

Malicious code in generator-ng-itobuz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 496207345626f600a0e4b6a1b81eaba0e1c575f8d71ceb479651681a6c132b7b The package generator-ng-itobuz was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191102 Malicious code in generator-ng-itobuz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 496207345626f600a0e4b6a1b81eaba0e1c575f8d71ceb479651681a6c132b7b The package generator-ng-itobuz was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199209

Malicious code in generator-ng-itobuz npm...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Malicious code in github-action-for-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 456b535e2ac0dbf2257fbb995ee5d72a53c3cfc544a0c9fb477f0c7eb20477d1 The package github-action-for-generator was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190845 Malicious code in github-action-for-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 456b535e2ac0dbf2257fbb995ee5d72a53c3cfc544a0c9fb477f0c7eb20477d1 The package github-action-for-generator was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-198831

Malicious code in github-action-for-generator npm...

EUVD-2025-198778

Malicious code in @seung-ju/openapi-generator npm...

Malicious code in @seung-ju/openapi-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f38aa15b9a4a24dec5d8ea17b00f0bcc9e7ba46386fd087b3a9fa569ade45a6 The package @seung-ju/openapi-generator was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190756 Malicious code in @seung-ju/openapi-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f38aa15b9a4a24dec5d8ea17b00f0bcc9e7ba46386fd087b3a9fa569ade45a6 The package @seung-ju/openapi-generator was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-198685

Malicious code in @asyncapi/generator-helpers npm...

MAL-2025-190657 Malicious code in @asyncapi/generator-helpers (npm)

@asyncapi/generator-helpers version 1.1.1 was published as part of the "Miasma RAT" software supply-chain attack campaign identifier "miasma-train-p1" that compromised several widely used @asyncapi npm packages on 2026-07-14. The malicious code was injected using whitespace hiding: it is appended...

EUVD-2025-198686

Malicious code in @asyncapi/generator-components npm...

Malicious code in @asyncapi/generator-components (npm)

@asyncapi/generator-components version 0.7.1 was published as part of the "Miasma RAT" software supply-chain attack campaign identifier "miasma-train-p1" that compromised several widely used @asyncapi npm packages on 2026-07-14. The malicious code was injected using whitespace hiding: it is...

Malicious code in @asyncapi/generator-react-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b0dadd48783af136a9dcf3f65cf9f24675841f02c7d1a5b6dc60709b392bf98 The package @asyncapi/generator-react-sdk was found to contain malicious code. Source: ghsa-malware...